cve.bz

microsoft vulnerabilities, newest first, page 38

Filter
  1. 9.8CVE-2026-69715EPSS 1.0%

    Out-of-bounds read in Windows Direct Show allows an unauthorized attacker to execute code over a network.

  2. 8.8CVE-2026-69714EPSS 0.8%

    Stack-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges over a network.

  3. 4.4CVE-2026-69713EPSS 0.4%

    Dependency on vulnerable third-party component in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

  4. 8.8CVE-2026-69712EPSS 0.9%

    Use after free in Windows Key Distribution Center allows an authorized attacker to execute code over a network.

  5. 7.0CVE-2026-69711EPSS 0.3%

    Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

  6. 7.5CVE-2026-69710EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hello allows an authorized attacker to elevate privileges locally.

  7. 7.8CVE-2026-69709EPSS 0.3%

    Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.

  8. 7.0CVE-2026-69708EPSS 0.3%

    Use after free in Windows Web Platform Storage allows an authorized attacker to elevate privileges locally.

  9. 7.8CVE-2026-69707EPSS 0.3%

    Integer overflow or wraparound in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.

  10. 7.5CVE-2026-69706EPSS 0.6%

    Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network.

  11. 7.0CVE-2026-69694EPSS 2.8%

    Deserialization of untrusted data in Windows IP Address Management (IPAM) Service allows an authorized attacker to elevate privileges locally.

  12. 7.0CVE-2026-69693EPSS 0.3%

    Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally.

  13. 7.0CVE-2026-69692EPSS 0.3%

    Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.

  14. 7.8CVE-2026-69691EPSS 0.3%

    Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.

  15. 5.4CVE-2026-69690EPSS 0.4%

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  16. 8.8CVE-2026-69689EPSS 0.8%

    Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges over a network.

  17. 7.5CVE-2026-69688EPSS 0.6%

    Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network.

  18. 7.8CVE-2026-69687EPSS 0.3%

    Integer underflow (wrap or wraparound) in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.

  19. 8.8CVE-2026-69686EPSS 0.8%

    Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  20. 7.8CVE-2026-69685EPSS 0.3%

    Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.

  21. 5.5CVE-2026-69684EPSS 0.5%

    Generation of error message containing sensitive information in Windows Error Reporting allows an authorized attacker to disclose information locally.

  22. 7.7CVE-2026-69683EPSS 0.8%

    Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

  23. 7.0CVE-2026-69682EPSS 0.2%

    Use after free in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally.

  24. 8.8CVE-2026-69681EPSS 0.8%

    Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges over a network.

  25. 8.1CVE-2026-69680EPSS 0.3%

    Origin validation error in Windows DNS allows an unauthorized attacker to perform spoofing over a network.

  26. 5.7CVE-2026-69679EPSS 0.6%

    Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network.

  27. 8.8CVE-2026-69678EPSS 0.8%

    Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

  28. 8.8CVE-2026-69676EPSS 0.8%

    Authentication bypass by capture-replay in Windows Kerberos allows an authorized attacker to execute code over a network.

  29. 5.5CVE-2026-69674EPSS 0.3%

    Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to bypass a security feature locally.

  30. 5.5CVE-2026-69672EPSS 0.4%

    Use of uninitialized resource in Windows DNS allows an authorized attacker to disclose information locally.

  31. 8.8CVE-2026-69671EPSS 0.8%

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  32. 8.8CVE-2026-69669EPSS 0.8%

    Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to execute code over a network.

  33. 7.0CVE-2026-69654EPSS 0.3%

    Use after free in Windows Accounts Control allows an authorized attacker to elevate privileges locally.

  34. 7.0CVE-2026-69652EPSS 0.3%

    Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

  35. 8.8CVE-2026-69649EPSS 0.8%

    Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.

  36. 7.0CVE-2026-69648EPSS 0.3%

    Use after free in Windows Notification allows an authorized attacker to elevate privileges locally.

  37. 7.0CVE-2026-69645EPSS 0.3%

    Use after free in Windows Message Queuing allows an authorized attacker to elevate privileges locally.

  38. 8.0CVE-2026-69643EPSS 0.8%

    Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges over a network.

  39. 9.1CVE-2026-69641EPSS 0.9%

    Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

  40. 8.4CVE-2026-69638EPSS 0.4%

    Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

  41. 5.7CVE-2026-69637EPSS 0.6%

    Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network.

  42. 6.5CVE-2026-69636EPSS 1.0%

    Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

  43. 8.8CVE-2026-69632EPSS 0.8%

    Use after free in Microsoft Office allows an unauthorized attacker to execute code over a network.

  44. 7.5CVE-2026-69631EPSS 1.2%

    Integer overflow or wraparound in Windows DNS allows an unauthorized attacker to deny service over a network.

  45. 7.0CVE-2026-69630EPSS 0.3%

    Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.

  46. 8.8CVE-2026-69629EPSS 0.8%

    Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

  47. 8.8CVE-2026-69628EPSS 0.9%

    Heap-based buffer overflow in Windows iSCSI allows an authorized attacker to execute code over a network.

  48. 5.5CVE-2026-69627EPSS 0.4%

    Out-of-bounds read in Windows Remote Desktop Licensing Service allows an authorized attacker to disclose information locally.

  49. 6.5CVE-2026-69626EPSS 0.9%

    Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information over a network.

  50. 8.8CVE-2026-69625EPSS 0.8%

    Heap-based buffer overflow in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges over a network.